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REMOTE NETWORK ADMINISTRATION 
METHODS AND APPARATUS 

BACKGROUND OF THE INVENTION 

Tbc:presei]|:inveDti<Mi:reUtes'-to'iiielfaods~aDd-a{^^ 
for managiDg iffitwork services in:a computer attworkTMcst^ 
specially, -<fae-i DveDtioo irdatesztosin^rovedrmrthofls-anda 
f^iparatusfof x^n^tBr-Witworfc^inaTiffgcT^^ fcighiy> 
flexible lan d^c asilyxitteniibi^ 
There are many types of coiiq)utcr networks in' existence, 
are known by various names, including Local Area 
Network (LAN), Wide Area Network (WAN), Internet, and 
the like, and may be implemented in acoordance a 
variety cf known architectures. FIG. 1 illustrates ao example 
of a conqMitcr network architectuic commonly known as a 
dient-scrvcr architecture. In the client-server network of 
FIG. 1, there are a plurality of servers 10 coupled to a 
network bus 12. A server 10 is typically inqilemeoted by a 
computer or a woikstatioa that is special purposed, e.g., 
large disk space, high speed CPU, multiple LAN 
connections, etc., while netwook bus 12 may be hafHt^ 
mentcd by any of the known netwoskrcMithig media such as 
coaxial caUes, multi-strand cables, fiber optic cables, or 



10 



13 



20 



ing and upgrading the services, and the like. IVpically. these 
administration tasks are performed via a network service 
management application. Ih^a$Ioi^s^Shiiihistraticni:modcl 
such asithat duywp in FK3.^1reacfa se rver 10 has its owD locals 
neiwodc3service- n w n a g r m rn t rap p li cat i on rl6.~Through3a 
localnctwodcsscrvlcc: managfJiynt; applicati on :^16.~ti ic:nct- 
ffof kadmlnistrator^ ma y-ftrt inf ni ffffzthc:netwoik:services 
in5tBlledion:the:$erv(^!wlKfelhe:neCwork:sa^ 
ment:application:is:executlng.* 

By way of example, ihe netw<xk administrator may 
enq>loy local netwoak service management applicatioD 16 at 
one of servers 10 to interact with the file service instantia- 
tions installed on that server in order to set individual users' 
access privileges for that server sharepoints. i.e.. the 
volumes, folders, or files designated for sharing by the 
D^{Hk users. Hie users' access privileges may then be 
saved to a database, to be consulted in the future by the file 
service to detennine ^»4iether a particular user has sufficient 
access privileges to one of the server sharepoints. 

FIG. 2 iUustntes the remote administration model for a 
con^mer network. In FIG. 2. die same servers II and client 
terminals 14 are coupled to oetw<ak bus 12 in a cUent-scrva 
architecture. However, the ronote network service manage- 
ment applicatioo 38 now resides at an administrative console 




representing known computers or computing terminals, arc 
coupled to the same network bus 12. each of which is 
curable of communicating with any one of servers 10 or 
other tenoinals 14 using one of the known network protocols 
such as ApplelUk™, TCP/IP, and the like. 

On servers 10, diere are installed instantiatioiis of netwoik 
service applications, which are typically software 
implemented, for performing programmed tasks. Examples 
of such network service applications include print service, 



° ^'^^ "H^"^.^. If: 23 (AC) 18. Administrative consdc 18 represents the computCT 

i™ « .* ► - terminal or workstation through which the network admhi- 

istrator may remotely manage the network service instan- 
tlatiotts Installed on the servers 10 of FIG. 2. An adminis- 
tndve console 18 may have simultaneous logical sessions 
30 with more than one server 10 or mrae than one service 
iastantiadon. Through these logical sessions, the remote 
network service management application may view the 
configuration data related to the service instantiations oo the 
network servers and. if appropriate, administer th e netwoik 
e-mail service, file service, and the like. A print service services installed Aoeon. 'ntecability:to^r^telylnanage' 
application manages the printer or print queue associated petwoik^scrv icesrCT serwrs-fliat-ma y^ly-geogatrfdcany* 
w^ a serva. thereby enabling client tcnninals 14 to utilize <UG{^^^m a:ceidiaUyflocated^ministiative^ooiso^ 
that printer for their printing needs. An e-mail service c particularty advanta geouSiforglaigeanetwaifcs^and- therefore 
q>plication performs e-maa management and routing tasks, re|]re3entS3an^improven^=overztfae~load=administi^oa> 
permitting client terminals 14 to communicate amoQg one ^ model^of'FIO.'^l^ 

FIG. 3 illustraies an example of a prior ait remote network 
A server 10 may be coupled to one of the network's service managenMcnt ^licMlon 38, such as that installed on 
central file stcvage facilities, e.g., one of die known persis- administrative console 18 of FIG. 2, including a server 
tent roemcHy devices (omitted in FIG. 1 for clarity) such as manager window 40. Within saver manager window 40. die 
• . i/ y^^Sf^ A RAID (redundant airays <tf inexpensive disks) ^ network service instantiations, along with the conespcoding 
I ftAsystcm, an optical storage device, and die like> A'file'service 
mstantfation-installea^^tha^sttva'-IO^ ^fo^^ 
related.tOrfilernianagement-fdrthe-benefit of users OD ciieiS^ 
trrmifwis :14.~Sudiflleservicetasla^indude' ftci^ 
man ftgrmrn ty: storagcispace.managgncnt, and tbe.lilce^'nie* jQ 
(^^^^n3 types of:netwoil services availal^ to a netvraik^ 
are^pracrically-limitless. 

As mentioned earlier, Instantiations of these netwoik 
services are installed on the network servers. A network 

service qjplication, eg., one of the aforementioned print ss CQtts<^-18,rit3C0nimanicates-widi=8ctected~servers=in~tte 
service, file service, <s e-mail service applicatioss, may have ^oetwork to asoenalii the stamses of the service instantiatioDS 
many instantiations, either oo the same server or oo different installed::^tbereQnrattd-re|)ort3that-data=in -window* 40. To 
servers. For example, most or aU servers 10 in FIG. 1 may «iimtiii«ti^ one of tiie services, the nctworic administrate 
each have a print service instantiation installed to manage a ^len selects one of the listed entries in window 40 for 
network printa. Further, a given service instantiatioa on a 60 administration. If the e-nudi service oo server AB entry is 
server may service nuiltqdc client terminals simultaneously. selected for administration, for tiuuiq)le, another window 42 
Likewise, a client terminal may establish a logical session niay be launchftd. Window 42 would contain Information 
with mult^e services simultaneously, either a single server regarding the rnmafl service on server AB such as the 
or on mult^de servers. number ci users on line, the fpwy iitf of disk space being used 

The network service instantiations on servers 10 are 65 by this e-mail service, number of maO messages stored per 
managed by a network administrator, who is responsible for user, and the lik& Ttoough'wi mtow da rtte-Detwoik adnrin- 
setting attributes and parameters for the services, maintain- tstrgtor may tfaeD-adtrnnistiy'die e-mail service by^^ 




network servers on which they execute and their statuses, arc 
shown. In the exanqfle of FIG. 3, three e-mail service 
instantiations oq servers AB, CD, and EF. as well as a file 
service instantiation, also on server AB. are shown. 

In die prior art, remote netwoik service management 
^jpUcation 38 is programmed to spedflcalty communicate 
widi and administer the network service Instantlatioos on a 
specific network. Wbcnidie prior art remote^o^twork serviM* 
ffl'* n ag rnK^ ?w rp lirntion'^38=^»-^^-*^^-^^*'*-*^^*"^"^*!^^v 
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the attribu»» :or:parw^i^d^ired,-C^ servers. The first odc of the octwork services icprcseats a 

^^'^^^^^i^s^S^^^^S^S^^-^ Dctwoik scrvic* that coircsponds to the first one of the 

Although the trior art approadi to remote nctwoikadn^ service components, 

istiation mprcsents an improvcmeot over the local network The apparatus further ii»cludes a saver manage coi^ 

model ofHG. 1, there are scvoal disadvan- 5 nent for receiving the netw«k service instant^on data 

tagps. By way of example, the ^or art ronote network fiom the savice ol^ject AdditionaUy, Ihoe ^^^J^ 

^ceiLagcmcnt^licationrequircsknowlcdgcbcfor.^ server manager wmdow, representmg the 

hand of ttTDetworiTScrvices on the nctw<Hk servers, m component for die saver man^«CT ««^;"^^Thc sender 

order to recognize and administer the services in a network, manager window functions to dfaplay a statos of the inrtan- 

the prior artrcnwte network service management »o dations responsive to die nctwoA service instantUtion data, 

tion Is programmed upon installation for specific types of In anotticr embodment, the invention relates to a naethod 

services, and a specific network pcotocol and configuration, for managing network services on the plurality of network 

and other network-specific as weU as service-specific servers in a computer network. The method indudes the step 

detafls. Knowledge of these nctwoik-spedfic and service- of providing at least one service component in a component 

spcdflc detafls is required by the prior art remote network repository. Hie service component corresponds to one of the 

service management application to allow it to communicate netwrak services. There is also included the step of provid- 

with a particular service insumtiation on a particular network ing a serva manager component, which conununicatcs with 

gjjygj the caiqx>nent rqmsitoty to ascertain the presence of the 

If it is desired, subsequent to the installation of the loior service component 

art remote network service management application, to " Additionally, the naethod includes the step ctf executing a 

extend the types of network services available by, for service object associated with the service cooyonimt Wto^^ 

example, installing a new network service on one (rf the executed, the service object communicates with the plimhty 

nctwOTk servers it is typicaUy necessary to reprogram die of netwak servtrs to obtain network service instantiation 

trior art remote netwoA service managememappUcatioa to data relating to instantiations <rf die one of petwork 
Slow tt to recognize and support the newly installed service. ^ services on the phirality of network servers. TTie method also 

•me reprogramming is necessary bccau se when die prior art indudes the step of passing die network service inrtantiation 

remote network service management appUcation was data to a server manager window component for di^Iaymg 

created, it is prograimned only for flic types of nctworic a states of the instantiations responsive to the network 

services available to the network at the time of its creatioa service instantiation data. 

The prior art remote network service manwgrmrnt qjplica- These and odicr advantages of die present invention will 

don would not know how to obtain status dau and admin- become apparent upon reading flic following detailed 

istcr some novd network services diat may be developed descriptions and studying flw various figures of die draw- 

subsequeot to the creation and instaUatioo of die isior art ings. 

-^^l^^^^^J^^ » BRIEF DESCRH^ON OFTHE DRAW«,OS 

management applicadon cannot communicate with the Additional advantages of Uk invention will became 

newly Installed network service instantiations to obtain ^^jparent upon reading die following detailed dcscripdoo and 

istat^t^ data and to administer them. drawings. 

As can be ^edatcd, die need to reprogram die prior art ^ piG. 1 illustrates an example of a computer network 

remote network service management application to integrate architecture conimonly known as a cUcnt-scrvcr 

new network services represents a burden for network architecture, induding prior art local administration fadli- 

administrators as wcU as for developers of flic various (jp^^ 

network services. FIG. 2 Qlustrates the prior art remote administration 

In view of die foregoing, what Is desired is an inqroved 45 model for a conqwta nctwok. 

icmote netwoA adm^tration apparams and methods fliat pjQ 3 Qlustrates a prior art remote network service 

can flexibly facilitate die extension of the types of network management application. 

services available on a caaq;>uter netwak. TTie inventi ve ^ ^ genaal purpose computer system for 

mdbods and ^params preferably pomit ttic improved inmiemcnting die servers, client tcrminaU, and administra- 
rcmote network administration aRaratus and mc&ods to « dve coosde of flic present invention, 

recognize and support flie addition, deletion and/or update of 5A and 5B show, in accordance wifli one aspect of 

netw<Hkservicesonflienetwork.ervcrwidioutrequiringIt5 invention, die architecture of die imfroved 

re-inqdemcntation. remote network admimstratioo apparatas. 

SUMMARY OF THE INVENTION FIG. 5C Illustrates an example of a user container com- 

The iHesent invention idates in one «'*>^*;to ^ ^'^^^'^ms^^ an example of a group container 

remote network administration apparatus for managing net- ^r^Z^ Ja^^ 

work services on a pUirality <rf network servers in a com- component window. 

^ ^^k. The appLtus indudes a component FK}. 6A illustrates in accordance wi^ne em^nl 
Story, whidi contaiSlavice components. Eadi of flie « of flie present invention, thert^ ^^^l!^^^^^^ 

S^rS^nts ocHresponds to^ of fl>c network new sovice in a c«nputer nrtwcrt thM ahea^ 

^apparatus fiirteindudes at least one service Improved remote network administration apparatus 

object dua is associated widi a first one of die scrrice mstallcd. 

co^ncms. THe service object, when executed, communi- FIG. iB iUustrates. in one embodiment, die «Witional 
ates^ die phirallty of network servers to obtain network 65 steps invcdvcd in handling the agents to accomplish die 

service instantiation data relating to instantiations of a first installation of die backcnd service entities on die network 

one of flie network services on die plurality of network servers. 
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FIG. 7 shows, in ooe embodimeat, the steps Involved in 
receiving data regarding instantiations of a service on the 
servers of the network. 

FIG. 8 shows. In acx^ordance with one embodiment, the 
steps taken by the service object in interacting with the 
agents on the servers of the network to obtain the nctwok 
service instantiation data. 

FIG. 9 desoibes the stqn taken, in ooe embodiment, by 
the service object in obtaining the netwoik service instan- 
tiation data without agent's involvement. 

FIG. 10 shews from the server manager component 
perspective the steps involved, in one emibodiment of the 
invention, in administering a network service from the 
server manager window. 

FIG. 11 illustrates, in one embodiment of the present 
invention, the stqis involved when a service administration 
oon^nent is invoked through the server manager window 
componcni. 

DETAILBD DESCMFnON OF THE 
INVENTION 

As described above, FIQ. I illustrates an example of a 
coiiq>uter network architecture commonly known as a client- 
server architecture. FIG. 2 illustrates the pricH^ art remote 
administration model for a conqiuter network. FIG. 3 illus- 
trates a prior ait network service management apfilication. 

FIG. 4 shows a general purpose computer system for 
tnq}lementing the servers, client terminals, and administra* 
live console of the present invention, lypically, senrers in a 
given network are provided with more computing, network 
connectivity, and storage resources than either client termi- 
nals or administrative consoles aldiough they may all be 
implemented using similar computer systems as hardware 
costs decrease. Referring now to Pig. 4, a conqNiter system 
50 in accordance with the jseseot invention includes a 
central processing unit (CPU) 52, read only memory (ROM) 
54, random access memory (RAM) 56, expansion RAM 58, 
hiput/output (I/O) drcoltiy 60. display assembly 62, Input 
device 64, and expansion bus 66. Con^wter system 50 may 
also optionally inchidc a mass storage unit 268 such as a disk 
drive unit or nonvolatile memory sudi as flash memory and 
areal-thne dock 60. In one embodiment, mass storage unit 
268 may indude units which utiUzes removable computer 
readable media, such as floppy disks, <yto-magnrtir niedia, 
optical media, and the like for the storage of programs and 
data. 

CPU 52 is preferably a coanmerdally available, single 
diip microprocessor such as one of the Sparc, Intel XS6 or 
Motcsola 680KX family of dilps avallafale from respecttvdy 
Sun Microsystems. Inc. of Mountahi View, Calif., Intd 
Corp. of Santa Clara, Calif., and Motorola, Inc. of 
Schaumburg, HI. fteferably, CPU 52 is a reduced instruction 
set computer (RISC) diip such as the PowerPC™ micro- 
processor available from the aforementioDcd Motorola loc 
CPU 521s coupled to ROM 54 by a data bus 72, control bus 
74, and address bus 76. ROM 54 may partiaUy ontain the 
basic operating system for the computer system 50. CPU 52 
is also connected to RAM 56 by basses 72, 74, and 76 to 
permit the use of RAM 56 as scratch pad memory. Expan- 
sion RAM 58 is optionally coupled to RAM 56 for use by 
CPU 52. CPU 52 is also coupled to the I/O ciccuitry 60 
data bus 72, control bus 74, and address bus 76 to permit 
data transfers with peripheral devices. 

VO circuitry 60 typically includes a number of latches, 
registers and direct memory access (DMA) controllers. The 
purpose of I/O circuitry 60 is to jffovldc an interface between 
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CPU 52 and such peripheral devices as display assembly 62. 
input device 64, and mass storage 268. Display assembly 62 
of conqxiter system 50 is an output device for displaying 
objects and other visual representations of data. 

^ The screen for display assembly 62 can be a device that 
uses a cathode-ray tube (CRT), liquid crystal display (LCD), 
or the like, of the types commercially available from a 
variety of niasufacturcrs. Input device 64 can be a keyboard, 
a mouse, a stylus working hi coopexadon with a position- 

i<> sensing display, or the like. Alternatively, input device can 
be an embedded RF digitiza activated by an "active" RF 
stylus. Therefore, as used herein, the term input device will 
refer to any mechanism or device for entering data and/or 
pointiitg to a particular location on a screen of a computer 

15 display. The aforementioned ii^Rit devices are available 
frtnn a variety of vendras and are well known in the art 

Some type of mass storage 268 is generally considered 
desirable. However, mass storage 268 can be rlimfnntnd by 
providing a suffident amount of RAM 56 and expansion 

^ RAM 58 to store user fli^llcation programs and data. In diat 
case, RAMs 56 and 58 can optionally be provided with a 
backup battery to prevent die loss of data even ^en 
computer system 50 is turned off. However, it is generally 
desirable to have some type of long term mass storage 268 

^ such as a commercially available hard disk drive, nonvola- 
tile memory such as flash memory, battery backed RAM, 
PC-data cards, or die like. 

In operation, information is inputted into the computer 
system 50 by typing on a keyboard, manipulating a mouse 
or trackball, or '^writing" on a tablet or on a position-sensing 
screen (not shown) associated with display assembly 61 
CPU 52 then pxKcsses die data under control of an opa- 
ating system and an apfdication program stored in ROM 54 
. and/or RAM 56. CPU 52 then typically produces data which 
is outputted to the display assembly 62 to i^oduce appm- 
priate hnages on its screen. 

Biqunsion bus 66 is coupled to data bus 72, control bus 
74, and address bus 76. Expansion bus 66 provides extra 
ports to couple devices such as network interface circuits, 
modems, display switches, microphones, speakers, etc. to 
CPU 52. On some oonqwters, the netwodc interface circuit 
may be built in instead of bditg provided through expansion 
bus 66. Regardless, n^oik oommunicatioo is aocom- 

43 plished through flie network interface circuit and ao appro- 
priate nctwcak. 

Still further, the present invention relates to machine 
readable media on viiich arc stared program instructions for 
performhig operations on a oomputa. Such media indudes 

30 by way of exanq^ magnetic disiu, magnetic tqje, optically 
readable media such as CD ROMs, semiconductor memory 
sudi as PCMC3A cards, etc In each case, the medium may 
take flie form of a portable Item such as a small disk, 
diskette, cassette, etc, or it may take the form of arelativdy 

55 larger or immobile item sudi as a hard disk drive or RAM 
provided in a oonqwter. 

no. 5A diows, in acooffdanoc with one aspect of the 
present invention, the architecture of the improved remote 
netwodc adrnhdstratioii appsntai. There is shown a server 

60 manager component 104. As wm be discussed in detail later, 
server manager component 104 rqscsents the entity that 
interacts with other conqKWcnts, known as service objects, 
to gather data regarding the network service instaittfatioas 
on the netwoik servers. Server manager component 104 also 

65 has a corresponding window, shown in FIG. 5A as saver 
manager window 108. Server manager window 108 is (he 
window throng ^cfa the human network administrator 
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can view the instantiations of the various actwrak service fonns and opewtiiig systems, eg., tbc Intel-based platform 

entities that are installed ODtbc servers of tbenctwort As popular known as the PC platfonn and its associated 

the torn is used hcnin. a savice entity represents a nctworit Windows-based operating system and Obj^ Unking and 

service, e.g., FileSffvice. PrinlScrvicc, E-MailService, and Embedding (OLE) environment, available from Uie afore- 

thc like. Each savice entity may in turn have more than one 5 mentioned Intel Corp. and Microsoft Corp. of Redmond, 

instantiations, or installed copies, on one or mote of the Wash, respectively, arc weU within the abilities of those 

network servos. skOled in the art given this disclosure. 

-niese bstantiatioQS of the network service entities, their For the MacOSIOpenDoc™ embodiment, the conjpo- 

rcspective statuses, and ihcir corresponding server names ncnts cast within an Editors folder IW, which is instaUed 

arcrfiown in window 108 as list lie. For cjiample, there aw "» on the adtaiinistiative console. When Opei^ is mtja^ 

shown two instantiations of die KleScrvice entity oDsccvtts the system, it automatically creates an "Edjtore f<ddcr IW 

AB and CD both of wWch arc running. A PrintService inside of tiie system folder. When the system administrator 

instantiation exists on server GH, whose status is currently runs the instaUation utiUty for the remote network admin- 

«Not Running." An XYZ service instantiation, representing istratira apparatus, an OpenAdmin folder 192 gets created 

vet anothaiSstaUcd netwodc service, is shown nimiing on is inside ttie ^TBditors" folder ld# and aU the components 

i-^„ TO related to the remote netw<ak administration apparatus are 

TTuough the uscx interface of sovcx manager window ^i^f^l^!: 
lOnThuman netw«k «hnitu^ SSJ^^S^^^^ 'S^v"^^^^ 

SiSTutSr^X^^ - ^f^^r^ts^asisap^ntto^^^ 

saviceissdccted,savermaiS«<»i^>KntlWmaytte^ in die ait gh.en this disdosure- . ^ , 

invoke, if possible, an appropriate component to handle the OpenAdmin folder lt2 represents an unplcmcntation of 
actual administiation. In this mannei, scrvtr manap^r win- the aforementioned component repository. By way of 
dow !•». tbioHgh undalying saver manager component eMn?>le, OpenAdmin folder li2 contains a jdurality of 
104 rqwsents the single entry point through which remote " service objects 103, each of whidi, as explained earUCT. 
sdniinistration of all network services on the network is ooirespmds to a diflfercnt netwwk service «»^Th« ^ 
initiated. Consequently, the invention aUows network preferably only one service object for each installed network 
administrators to administer discrete networic services ftom service entity, irrespective of bow many mstantiaUons there 
a central strver manager window while providing them with maybe. 

a consistent, integrated user cxpcAeace as if the adminis- wUh reference to FIG. 5A, feexc is a FOeScrvicc object 
trator were operating within one unified soltwaie appUca- which ccRc^nds to a network HleServioe service entity, a 
tion. Erwn tiiis single entry point, network administralors printService object which corresponds to a network Print- 
can browse and select the services they wish to administer Service service entity, and an XYZ service object which 
ontiicnetwcrkas well as monitor these individual network corresponds to a network XYZ savice entity. Hie service 
services and servers from a coimnon viewpoint. objects are typically obtained from network service 

In contrast, tfie prior art requires a nctwafc administrator developers, who suM>ly network service parages to net- 
to use multiple nett^ork sovice managonent Bpp)ia^ns to workadministraton fainchision in the network atha along 
manage tiic different network sovices installed on ttic witii sava manager conqwnent 104 w at a time suteequenl 
network servers. Each of tfiescnctwwk service managcmcDt ^ to fee installation of server manager component 104. 
application may be created by a different developer. Upon startup, scrva managa con^nent 104 scans 
Consequently, the different applications may lack the gen- through the component repository, ie., OpenAdmin folda 
crality and common components tiiat provide the human 102 in tiie present embodiment, for the service objeds. For 
network administratar with an iidegrated user cxperietKe. each service object, serva managa oomponenl 104 aeates 

In accOTdancc with the prefaied cmbodinwit, there exists 45 associated Instance of that service object For example, 
a component iqwsitory, which may comprise one or more when saver managa componcrt 104 encountos the 
filcsiSiding dtha locally at the administrBtor's terminal or FUeSovice ob)ect in OpenAdmin fdda 102, 
on tiie netwak for indicating ttie locations of die compo- instance of diat FileSavice objwt, shown as FUeSovice 
ncnts. Ead» network so^^cLt is installed on die network object 106. FfleSavice objert 106 tiien c«mmmicates with 
scrvashasacaiespondingsavicc6bjectrcgi5taedwidior 30 the savas in die network to ascotam all mstantiations of 
contained witirinlds^lponent i^itwy. For case of the FflcServicc entity 00 flic nctwwt TTie nrtwoik setvicc 
iUustration, subsequait discussions herein are made with instantiation data regarding FDeSovioe is theo P««J> Jo 
reference to die Madntosh operating system (MacOS™), serva managa component 104 to be dispUyed in list Uf in 
manufactured by AppJe Coinputas» Inc. of Ci^wtino, Calif. serva managa window 108. 

and particularly to a component-based environment known 33 An instance of a service object, such as FUeServioe object 
as OpcnDoc™. also avaflaWe from Apple. For fiirthainfar- 1O6, is preferably a system object module (SOM) and is 
mation regarding component-based architectures and the tfaertfore platfcHm and language independent There exist 
aforementioned OpenDoc™ environment, reference may be niany references regarding system object modules, object- 
made to, for cxanqde, cammooly-assigned, pending p^nt oriented programming, and component-software 
application VS, patent Sa. Na 08/175^19 entitied Trtmc « architectures, eg., OpenDoc™, OLE, and flic like, in die art. 
Structure Which Provides an Interface Between Parts of a Discussions of diese topics are tfierefore omitted f<s clarity. 
CaiqXMmd Document which Is hereby incaporated by in general, a savice object, such as RleSovice olqect 106. 
reference. does not possess a usa intoface. As mentioned earlia, its 

It should be bone in mhid, boweva, diat flic present main function is toobtain network savice instantiation data 
inventioo is ndflia tinrited to die MacOS™, OpenDoc™, 63 from flieoomputa networic and return ttiat data to die serva 
nor to any particular con^Mita platform or network. The managa conqwoent 104 to be displayed In serva managa 
adiqxation of the invention disclosed herein for ocha plat- window 108. 



08/19/2003, EAST version: 1.04.0000 



5,748,896 

9 10 

In accordance wifli one aspect of the present invention, folder 102 contains a PrintScrvice conqranenL I^tSeivice 

the low level network-specific and service-specific details object 112 then interacts with Ihe servers on the netw(nfc to 

such as configuration, communication protocol, what this find out all instantiations of tiie ftintService entity on the 

service does, how this service works, and the like, that are netwoik servers. In this example, there exists only one 

required for communicating with the servers ate pfeferabty 3 initiation of the PdmSeivice entity on server GH. This 

enc^ulated within the service objects. This allows die netwoik service instantiation dau, along with die status 

service developers to utilize flic protocol and network tecb- information, e.g.. **Not Running" in the present example, is 

nology best suited to die requirements of their service. then displayed by server manager component 104 in server 

In fact the servff manager componenl is not required to manager window 108. 

know how the netwock is conflgurul. how many servers are 1° There is further shown a User/Group (U/G) oon^oneirt 

coupled to the network, and what protocol is enjoyed for 120. representing the conqwnent diat manages the accounts 

network coimnunicatioD. Further, die server manager com- of individual users and groups on a particular server of die 

ponent is not required to know how a particular service network. U/G component 120, which is typically installed at 

functions and how to administer that service. The retrieval of the administrative console, is invoked when the network 

netwoik service instantiation data and, as wiU be shown administrator selects one of the servers in list UO (in server 

later, the administration of those network services, arc manager window 108) and indicates his or her desire to 

handled by other discrete corr^nents ttut advantageously administer the users and/or groups on that server. 

encq>sulate the low-level details away from the server Iq qqc embodiment, ttic selection of a server for user/ 

manager component group administration is accomplished when the network 

In this manna, die server manager component becomes ^ administrator selects a server in list UO and invokes die 

essentially a messaging center for receiving network service user/group conqxmest by selecting the user list button 124 

instantiatioo Hato displaying to the human network admiiH or performing a similarly suitaUe user interface action, 

istrator that data, and passing administration commands and Server manager con^KHient 104, which is associated widi 

data related to one of the displayed n^otk service instan- the server managa window 108. wQl then pass the address 

tiations from the human netwock administrator to other ^ of the server selected to U/G component 120 to allow U/G 

disoete compoDcots when die network administrator wishes conqionent 120 to administer die users and/or groups on die 

to administer one of die displayed network service instan- selected server. 

tiations. Advantageously, the user interface is bandied by die Li the pceferred cmbodiincnt, the interaction between die 

server manager window consistently, thereby presenting die human network administrator and U/G conqionent 120 is 

service information in a consistent manner irrespective of ^ preferably accomplished dirough a U/G manager window 

the number or types of services on the network servers. 126, which corresponds to U/G component 120 in this 

F u rthermore, the server manager conqionent of the specific exanq)ie. To Illustrate, when the netwoik adminis- 

present invention is not charged widi the low-level, network- trator selects server AB in the list of netwosk service 

specific comimmicatioa details and service-specific admin- . instantiations that reads ^'ABMinmng/FileServlce" and 

istration details but reUes instead on die service objects to selects user list button 124 in server manager window 108. 

obtain its netwock service instantiation data and on die die server address AB will be passed from server manager 

service administration ccmqxments to maiuge die services. conqKment 104 to U/G component 120. U/G oonqxineat 120 

Coosequendy, tbe extension of the set of n^ork services . then oomnumlcates widi the selected server. Le., AB in diis 
through die addition of a new networic service (<ar die ^ example, to obtain die list of users and groups diat are 

removal of a network service firom one of the netwoik registered with server AB. Through U/G manager window 

servers) diocfore does not require die le-architecturing and 126, the network administrator may then create new users 

the re-inqilementation of the server manager ccHxqx>nent and groups as wdl as edit or delete existing users or groiq>s 

CoQcomitandy. die cost of ownership and maintenance of a and dieir attributes. 

netwock is adrantageously reduced. ^ jhe U/G manager window 126 itself is preferably an 

In one embodiment the service object can be devek^ied OpenDoc component which is capable of invoking user or 

simply as a shared library. The service object, when invoked group OpenDoc containers for modifying respectively usa 

by the server manager component receives from tbe shared attrtbutes and group attr&ntes. Containers are oonqxments 

library pointers to a speciflc memocy area where (he service that contain odier components. Examples of user attributes 

object can write to. Tbe service object itself preferably include authentication data and access data for login 

possesses sufficient infocmation to allow it to obtain netwock verification, group membership data q>edfying die group(s) 

service instantiation data and status from the netwodt serv- to which a partictilar user bdoogs, and any other mlscella- 

ers. The network service Instantiation data and status, once neous attributes such as tttle, ctmimcnts, and die like. Group 

obtained by the service object, are then written into die aOributes iiKhide, among others, its membership list, 

aforementioned memory area for access by the server man- 33 launch a user container con^Knent die network 

ager component To illustrate, an example of a service object administrator selects one of the users in the Ust of users 

is fimdshed herein as Appendix A. displayed in U/G manager window 126, eg.. John Lewis, 

FUidier,the service object represents the central structure and indicate his or her desire to administer the attributes of 

throu^ whidi infonnitfion related to other components for tiiat uses: In the pr efe rred embodiment tbe admirustration of 
the associated service can be centralized. By way of to user attributes commences once die network administrator 

exanqple, a service object typical^ includes information dmiUo-clicks on a particular user name or performs a 

regarding whether a given service has associated widi it an similarly suitable user interface action to launch a user 

administration conqionent or a user/group conqwnent This container component Through a window associated with 

infonnation may then be used by the server manager com- the user container oosi^Dent die aforementioned user 
ponent in the administration of diat service. ^5 attributes, among others, may then be modified. An exan^ 

Similarly, server manager component 104 will ocate a of a user container component window is shown in FIG. SC. 

FrintSecvke object U2 upon ascertaining that OpenAdmin Group attributes may also be administered in a similar 
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maimer An cxamnlc of a group container component win- components foe administering aspects of pacSeryicc. These 

dow is illustratodto FIG. 5D. ^ sbown as access control ^j^^* 

WW w uiMa«a«^ « wlndow 204 loefik window 206, and**otber^ window 208. 

Note that the attributes of a user or may ^ T^^clM^Jna SB, these windows are 

dynamicafly modified even afte the instoUi^ iinplcmSS as foldff tabs within HleSovice administra- 
OpenAdmin system. This feature is particularly advanta- ' Jon window 2M for usahaUty reasons. To access one of &e 

gcous in permitting the human netwodt adnumstrator to add ^do^s 202-208, the netwoifc administrator merely selects 

user and group attributes to satisfy the needs a subse- ^^^^ of the tabs in FflcServicc administraticHi window 200. 

qucntly acquired and installed network service. This is ^ function of the access control conqwnent 202 of the 

because not all user and group attributes may be jxovidcd at FOcScrvice container is to display and assign access privi- 

the time the core OpenAdmin system is installed. (o a selected user or a group. Through access control 

By way of example, a subsequently developed component 202. the network administrator Is able to view 

E-MailScrvicc may need to identify the mailbox location for the access privilege of a selected user with respect to the 

a particular user. Thus, the E-MailServioe developer would sharepoints, ix,, the shared volumes, folders and files, on a 

implement a usct attribute oonqwnent for spedlying the designated server. This feature gieaHy sin5)lifies the FfleScr- 

mailboxlocalioo. At the time the B-MailSeivice is installed, vice administration task and Is further discussed in a 

this user attribute component would be instaUed into the co-peading patent qjplication entitled improved File Ser- 

OpenAdmin folder. When the OpenAdmin system is vice Administration Apparatus and Methods," (Altotiiey's 

launched, this new user attribute component would become Docket No. P1829/APL1P164), filed on Nov. 3, 1995, 

part of the dynamic list of user attributes that are modifiable assigned to the same assignee Apple Conqwta, Inc., and 
by the human network administrator. In the exanqile of FIG. ^ incosporated herein by reference. 

5C , the different user attributes are accessible through The netwcik administrator can also set, through access 

popmp menus 1202. control component 202, the maximum disk space assigned 

With reference back to FIG. 5A, U/G con^nent 120 to a particular shared vohm» or folder, and review data 
includes a usa component and a group componenL The user ^ regarding the amount of disk space remaining to be utilized 

component, which is a container, indudes user attribute by that partlcuLir folder 

components. The gfoup component, which is a container. Activity monitor oon^nent 204 of the FileService corn- 
includes ffoap attribute components. U/G con^wnent 120 is ponent rqnesents a conqxment Ux showing the run-time 
prefaaUy stored in OpenAdmin folder 102 and shown in activity data for a designated server. Log file component 206 
section 122 of OpenAdmin window 102. However, it pref- ^ allows the nctworic administrator to view events that have 
crably has different signatures than the service objects 103 previously oocmxed on a designated server. An optional 
to aUow saver manager conqHnent 104 to diffcrentiatB "otfaer^ consent 208 represents a place holder, which can 
between it and the service objects 103 in OpenAdmin foWer be plugged into by a third party developer or a subscqucntty 
102. released component that can be used to administer FileSer- 
A networi: savice may either be capable of being 35 vice installed on the server machines Exai^lcs of such 
administered, i.e., its status and attributes can be modified, con^xwent include, for cxanq)le, an alarm notification coni- 
or leoresent one for which no adminlstratioa is permitted. As ponent to contact the network administrator via, e.g., e-mail, 
an exaimde of the Utter, some network services may simply pager services, and the like, when an event requiring net- 
dia>Uy static unchangeable data regarding the service for work administmtor intervention is encountered on the file 
viewing by Che human netwak administrator. If a service is 40 server nudiine as wcU as other functionalities that extend 
cuiable of being administered, a service administration the management capabilities for the file scrvet 
component is provided in OpenAdmin folder 102. Tlie FK}. SB also shows an XYZ service administration win- 
service adminlstratioa component represenU the conqwnent dow 220. In this example, XYZ service administration 
responsible for communicating the human network admin- window 220 is associated with an XYZ savice administra- 
istratox requests to the associated netwcik service installed 45 tion conqmnent that is installed following the installation of 
on the servCT madiine. In one embodiment, these adminis- server manager conponent 104 to implement a desired 
tration components have an identifier, eg., a file type, that networic service. XYZ service administralion window 220 
Identifies them as OpenAdmin can^Knents generidly, ie., may either be a flat component or a container. Le., one that 
components of the inqnoved renoote network administration possesses subconqwncats such as those shown as suboom- 
apparatus. Additionally, they also have other signatures to ponents 222, 224, 226, and 228 In FIG. SB. Because the 
distinguish them fiom other OpenAdmin oampontnts sudi XYZ service otject itself (as weU as its associated admin- 
as the savice objects 103 or the user and group attribute istratifm con^nent and suboooqxHtents, if any) is listed in 
conqwttcnts. OpenAdmin folder 102, XYZ service instantiations on the 

By way of example, FIG. 5A shows a FileService com- netwwk servers are ascertained (by invoking an XYZ ser- 
pon4t within section 103 of OpenAdmin foMer 102. Since 33 Wee object) and displayed in the server manj«er wind^ 
RJeServicc rqacsents a netwcA service that Is capable of 108 every time server manager conq»ODent 104 is launched, 
bdng administered, OpenAdmin folder 102 also Indudes a When the netwok administratcr selects the XYZ service 
HlcService administration coD^ronent in section 140 of instantiation entry in the list of networic services 110 in FIG. 
OpenAdmin folder 102. When invoked, FUeService admin- 5A and indicates his or her desire to administer the selected 
istration cotqwnent 140 creates a user interface, typically in 60 service instantiation, the server address associated with tiic 
a window, through which RleService-rdated data can be selected XYZ service instantiation is passed to the XYZ 
displayed and administralion commands related to RleSer- service compoocnt The XYZ service component then cre- 
vice can be invoked by the network administrator. ITiis ates XYZ service admldstratioo window 220 for allowing 
window is shown in HQ. SB as FileService administration the networic administiatOT to administer the XYZ service 
window 200. 65 instantiation selected. 

In the preferred embodiment, the RleServioe administra- Access control to a netwoA serrioe on a given server may 

don window 200 b a containex that contains other sub- be administered by appropriately adding or ddrting a user's 
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or group's name finomtiiat sovice's administration conqx)- object assodatcd with a netwoifc service entity oomnmnl- 
oent window. By way of example, FIG. SB shows an access cates with the network servos to obtain network service 
control component window 250 associated with FOeService instantiation data for the instantiations of the corresponding 
administration conqwnent window 2N for controlling network service enti^. The network service instantiation 
access to one of the shar^ints. As the term is used herein, 5 data is then communicated to server manager component 
a *^sharepoint" denotes a folder or a volmne that has been 194 to be displayed and administered throng server man- 
designated for sharing by selected network users. Access ager window !•& 

control list window 254 is invoked when die network In one embodimect, the set of service components may 

administrator selects a sharqxiint, e.g., ''After Dark 3.0** also indude an clonal service gecinfo componem. rqxe- 

folder in this example, and indicates his or her desire to sentlng a ooiiqx>aent that may be executed from server 

administer the access control list, e.g., by selecting Set manager window 108 to obtain certain selective information 

Access Privileges Button 233. atxxit a selected network service instantiation. By way of 

After access control list window 250 is invoked, the cxanq>lc, when a p«ticular FDcSavicc instantiation is 
network admlnifitrator may then add a user's or group's sdected for the getmfo operation, the gctinfb conqwnent, 
name as wdl as specify the type of access granted, i.e., „ ^^^f,^ iT^'^^'^^J!'^!^ "^^^ " 
whetherthegranted^sshasanyassodatedlimitatlonscr f^***^,!*? ^T;^^ ^ 
restrictions.Tlie addition of a user's or group's name may be bcing^ selected. Sudi sm^sbrt data for the selected FileScr- 
acconq)lishcdby 5iiiq>lytypinginthci^crchoadngonc "oe instantiation mj^ inchide, c.g., how m«iy usm are 
fromlelistof usoTkadgroupsregisteredwith the network T'Z^^luT!^ 
scrvcronwhichtliatscrv^in^tiirtionrcsides.Suchalist ^ at the time, the utiUzajon ra^^ 
is shown in user/group componcnl 254 of FIG. 5B, which infomatlon provided by the getinfo componait is sendee, 
may be invoked ^,f(J«am^le,sdecting User List button and the data fiff^cd by it vary depending on 
232 in the RleSerricc Administration window 200. In the whlA service is sdected for getinfo juration m network 
wefored embodiment, the system administrator may add a «^ °>»°»8" oosnponent lOS. 
name to access control component 250 by, as shown in FIG. „ FWher, the set of service oompoocnts may also include an 
SB, simply dragging it from user/group component 254 to °9^oiisl U/G (user/group) browser, representing the corn- 
access control oonqxinent 250. A name may be deleted by potieot that may be invoked from the server manager win- 
dragging it out of access control Ust window 250. ^ 108 to manage the users, groups, and thdr attributes for 

It should be borne in mind that although only the FileSer- ^ S'^^JT'^ ^^SL*°**5fT T 
vice administration coiqwacnt and the XYZ service a^ 30 ^^^'t.^*^^' '^J^''*^^^ 
istrationcoo^wnentareflU^trato^ ^ ^'^J^*l^. ^ SlSX 
service s andls sodated administration conq>oocnts can also However, it la c^^l^ that a swice mgrbe provided 
be implemented analogously. As mentionXsudi netw«k with its own U/G teowser in some other embo^mcnto 
services include, for example, PrintService and If the network sendee has panunetcrs that can be modified 
B-MailScrvicc, as weO as any other kinds of services fOT use 35 ^ network administrator or 15 capable of bemg con- 
in a nctwcKk. The spcdfic kinds of network services and troUcd through the remote network administrattonaRMuams 
thdr user interface details arc not ciiticaL In accordance <in contrast to services that merdy obtam and display data 
with flie invention, aU the network services, whether for the network administrator's viewing), the srt of service 
installed at the same time with the server manager compo- compooents preferably indudes a service administration 
Dent or subsequent to it to extend network services, can be « convoccnt, representing the component for i^lemcnting 
recognized and supported liy the inqiroved remote server the user interface that fedlitate communication between that 
manager component when the in^voved remote server man- service and the network administrator, 
ager con^ncnt is launched, ie., started 00 the administra- After the additional or updated service conqwnents and its 
tive console. assodated backend service entity are obtained in step 502. 

Id accordance with one embodiment of the present 43 bacfcend service entity is installed on one or more 

tovention, FIG. «Aillustrate8 the steps involved in installing sdetted servers in the computer nctw<ak in step 503, 

a new service in a ooamjuter netwcA that abeady has the TVpically, each instantiation of the backend service entity is 

core improved remote network administration apparatus installed at (be site of the selected senra(s). However it is 

installed As mentioned earlier herein, the new service, possible to remotely install these backend service Instantia- 

foHowing installation, can be recognized and administered jo directly from the network administrative console in 

through existing server manager component 104 and its networks. 

associated server manager window 108 without requiring In block 504, the service comp(wents obtained in block 

the re-configuration, le-iniplementation, or repiogramming S02 are instaUed in the component repository. e.g., OpenAd- 

of server manager compoaent 104. min folder, on the network administrative console. As dis- 

FIG. 6A starts at step 500. In step 502, the additional or 53 earlier, this OpenAdnain folder is, in to; MacOS/ 

updated service oonq)onent8 and its assodatcd backend OpenDoc embodiment, part of the Edttors folder on the 

service entity are obtained TTie backend service entity administrative console. Ftom block 504. the method ends at 

rqresents the software enti^ that is installed on one or more blodc506. 

servers in the n^ork to actually perform the desired In stq> 503 of FIG. 6A, it is assumed that there are 00 

network service, e.g., FileScrvice, PrintService, <o remote m a n a g ement agents on the servers of the network. If 

E-MailScrvice, and the like The service compooents rep- one or more servers in a iketwcsk have agents executed 

resent the canqxxienls to be placed in the con^mnent thereon, FIG. 6B illustrates, in <Xit embodiment, the addi- 

r^sltoty, e.g., OpenAdmin folder 102 in the specific tional stq» involved in handling the agents to aocompliah 

embodiment, to be recognized by the server manager coo^ step 503 of PIG. 6A (installattoo of the backend service 

poneut 104. The service components also indude a service 63 entities on the servers). 

object which, as mentioned earlier, is preferably a system Remote management agents ate an clonal feature on 

object module (SOM) object When invoked, the service some servers. On a given server, an agent performs the 
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central maMgcmciil functions thai each service separately level networfc-spedfic and «f^V^^^i^°^^^ 

would haveto peifonn and centralizes the data obtained to obtain network service instantiation data reUtcd ^ a 

^ performing^toose central management function* in one particular network 8crvi« is a^antagoously encapsulated in 

^oTT^a for ready a^Bysu,^ agents. ^^l^^^^^^^ 

d« individual services c« a r^^ ^ ^^J^^^Si'^^^^^^^^^t 

perfonn these management fimctions themselves. (^^^guxtd, how many servos ^ <»i^ed to the network, or 

In one embodiment, agents are used to manage (he even how the network service instantiation data is obtained, 

uscrs/groiqw databases that exist on the servers. The agent Because of this, any nctwwk service having an apfHopriate 

pdfoims all the necessary management of that database and service object can be integrated into the existing network 

downloads the database to the administrative console upon management coiiq[mnent framcwoik to permit the network 

request. An agent may also provide a service registry that administrates to manage it along with all the other network 

aUows all services to register through an Application Pro- services as if he wot working within a single monolithic 

gramming Interface (API), An agent lustallcxl on a server application. 

will have knowledge of all the services installed on that xn Uock 706, die network service instantiation data 
sever; The service objects may utilize a client-side API for " regarding the instantiations on the network servers of the 

obtaining instantiatioDS of those services as registered in the service associated with this service object is received by the 

service registry. server manager oon^xment. In block 708. the data received 

Further, an agent may provide a logging interface. AU the in block 706 is di!?>layed in the server manager window 

service histantiations that run on a server, e.g., FaeServicc, component, e.g., server manager window convottcnt 108 of 
PrintScnrice, &-MailS<Tvice, XYZ service, and the like, may ^ nO. 5A. If Ihcrc arc additional service object component in 

open and write to the agent log file (throug^i a set of API). the component repository, the method then returns to block 

To faciliiatc the viewing of the entries of this log file, the 702 to ascertain the next service object component, 

administration console may employ a client-side AH to talk Otherwific. the steps of FIG. 7 end at Hock 710 where the 
to the agents to obtain the log entries for a particular service ^ process of FIG. 7 is idle (other processes may still be 

on that servet executing), 

FIG fiB starts at Mock 600. In block 602, the agent on the If tiicrc exist agents on the network servers, it may be 

servers b ascertained. If there is no agent and the new necessary for the service objects to uitcra<i with the agents 

service requires an agent, the new agent nwy be installed in to obtain information regarding ibe instanliatioas of the 

Wock 602 on the server whcic installation of the hackcnd service associated with this service objcrt. FIG. 8 shows, in 

service entity is to take place. If there already exists an accordance with one embodiment flie st^ taken by ttic 

acent this odsting agent is ascertained in block 602. In service object in hiteracting with tiie agents on the servers of 

Wock 604, the agent is executed on the server. In block 606, the network to obtain such network service instantiation 

tiie backend service entity is then installed on the desired data. 

server to create an instantiation. In some embodiments, tiie FIG. 8 starts at block 800. In block 802, agcnU from all 

server may have to be restarted to endde tiic agent to Uie servers in tiw relevant network/zone arc ascertained. In 

ascertain data regarding tiic newly installed backend service some netwodcs,a zone may be defined as the entire network, 

instantiation. When die service is executed at the sciva, it On odier networks, a zone may represent a specific domain 

wiU &cn invoke a service registration API (Application comprising a predefined group of servers and client termi- 

Fkogramming Interface) to communicate to the agent about ^ nals in a network. The division of a network into zodcs 

its existence, its status, and other parameters. Tbc steps of fadlllatc management if the network Is large. For the 

FIG. 6B end at Wock 608. purpose of the present disdosure, the term zone and network 

Following the installation of a networit service' s conqx*. may be used interdiangeably. 

nents on the administrative console, the server manager In block 802, die agents may be ascertained by simply 

component can then utilize die service object associated 45 polUng tiic servers for ti»ir agents or by broadcasting to aU 

with the installed sorioe component to oormnunicate with servers over Ihe network and asking tfie servers to respond 

die netwosk servers aikd receive data regarding instantiations with its address if ttiat server contains the agent of interest 

<rf dun network service entity on the servers of the network. By way of example, the broadcast mechanism may be 

FIG 7 shows, in one embodiiMnt tiie st^ involved in employed in networks that utilize the above-mentioned 

itcdving data regarding Instantiations of a service on the 50 ApplcTUk™ protocoL Attematively. some networks, e.g., 

servers of the network. FKj. 7 starts at block 700. In block those implementing TCPOP (Transmission Control 

702 Uie service componcms in the con9)onent repository, Protocol/Internet ProtooolX may have a server designated to 

eg in the OpenAdmin folder 102 of tiie present keep the data relating to location of the agents in flic 

erSiodiment are ascertained. network. In tftis case, step 802 involves interacting witii tiiai 

The service conmorients in OpenAdmin folder 102 are 53 <J«ig°a»ed server t^ 

mferaWy ascertained sequentially. As long as tiiere remains For each agent ascertained in block 802. the mcmoa 

a service component in OpcoAdmln folder 702, (as deter- proceeds to Wock 804 to ascertain whetiier, for ttie service 

mined in Wock 703), the metiiod continues to proceed to object being invoked in Wock 704, tiicrc is an instantiation 

Wock 704 wherein tfie server manager component Invokes of flic ooirespooding service entity instaUed on flie server. If 

flie sCTVioe object fliat is associated witii ttiat service com- « Uierc are many instantiations of tiiat service 00 the server, 

poncnL In block 706, the service object comnmnicates over fluit data is also ascertained in Wock 804. In Wock 806, a tist 

die network using a protocol jwropriate to flie network of service instantiations residing on die servers in die 

service entity (flie pnJocol-specific canmunication details zonc/nctwoA of interest along wUh Uic statuses of tiie 

are encajwulated in tfie service object). services, is compiled by flic service object ttuough flic use 

The service object tfien ascertains ftom tiie servers on flic 63 of die service registry browsing^ 

Dctwcrt aU ttie instantiations cf die service entity ttwt is The stamses of tiie service instantiations arc preferably 

associated witii tiiat sffvice con^wncnL Note tiiat tiie low asoertahied also ttuough ttie agent Examples of sudi sta- 
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tuscs include etecuting (niiuiiig). stoppii^. tenninating. 
idle, technical difficulties of various kinds, and (be like. 
Alternatively, the service object may use the ascertained 
scnrcr addresses of the servers on whidi the relevant service 
instantiations are installed (the server addresses are ascer- 
tained in block 804) to establish a session with those servers 
to ascertain the statuses directly from the servers. 

In block MS, the list that was conq^iled in Uock 806 Is 
passed to the saver manager component to be displayed in 
the server manager window component. The steps of FIG. 8 
end at block 810. 

If die service object docs not require the use of agents to 
ascertain the network service instantiation data, FXO. 9 
describes the steps taken, in one embodiment, by the service 
object in obtaining that data widiout agent's invoWemem. 
FIG. 9 starts at block 900. In block 902. the service 
instantiations associated with the invoked service (rtiject on 
aU the servers in (he zont/network of interest arc ascer- 
tained. Again, the service instantiaticms may be ascertained 
dttier by broadcasting to aB servers in the zone/network of 
interest, e.g., die case wherein the protocol is ^)pleTalk™. 
Hie netwodc servers on which tfietc is an instantiation of that 
service entity will then return its address to the service 
object 

Aitemativdy, the service object may inquire from a 
designated server, e.g., a directory service, in the network to 
ascertain which servers on the network have one or more 
instantiations of the service entity of interest installed 
dicreon. 

In block 904. the statuses of the service instantiatioos 
ascertained in block 902 are determined. These statuses 
represent the service specific run-time statuses of the ser- 
vices and may include such statuses as nuning, tenninating, 
and the like. In block 906, the list of service instantiations 
residing on the servers in die zone/netwodc along with the 
statuses of those service instantiations are bdh. la block 
908, the list created in block 906 is passed to the saver 
maoaga component to be displayed in the server managa 
window. The Btq» ai FIQ. 9 cod at block 910. 

FIO. 10 shows from the serva managa conqxmem 
perspective the steps involved, in one embodiment of die 
invention, in administering a network service from the 
serva managa window. FIG. 10 starts at block 1000. In 
block 1002, the network administrator selects the service 
instantlatton to be administered using a suitable usa inta- 
fsce command from the serva managa window. In one 
cmbodtmeot, the selection of the service instantiation to be 
administered is performed by highlighting a service instan- 
tiation entry in the list of networic services 110. 

In block 1004, the network administrator indicates die 
desire to administa the service selected In block 1002. 
De|)ending on die usa interface design, the indication st^ 
of block 1004 may be accomplished, in one embodiment, by 
selecting an "administer" button. Howeva, the network 
administrator may aitemativdy indicate the desire to admin- 
ista the selected service through a pop-iq> menu, typing in 
keys on a keytraard. sdecting an item from a menu, and the 
like. Note diat If there is no service administration conqx)- 
nent associated with a sdected service, diere would be no 
conq>onent to facilitate the administration of the service. In 
diis case, a warning is preferably sent to die network 
administrator to indicate that the service selected In block 
1002 cannot be administered through this ai^uratus. 
Altonatively, the above U/1 dements may be disabled to 
prevent sdcction when no service administnUion component 
is provided. 
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b block 1006, the service administratioo conqranent 
associated with the service instantiation selected in block 
1002 is invoked. Upon being invoked, the service adminis- 
tratioo ooiiqx>nent will en^loy the serva address (hat is 

5 associated with the service instantiation sdected in Uock 
1002 to estaUish a logical necwoffk session with die appro- 
priate service instantiation on die backend serva (the serva 
\tiierc the service instantiation resides). If the session is 
established successfully, die window of this service admin- 
istration component is dien invoked. Hirougb diis service 
administration window, the service can then be 
administered, e.g., by changing parameters <h' attributes in 
the service administration window. If, howeva. the session 
cannot be established successfully, the service administra- 
tion component may post an enor message in lieu of opening 
its associated service administration window. 

In one embodiment, if the service instantiation indicated 
in block 1002 is not yet launched. Le.. executed, on a given 
backend serva, the network administrator may be asked 

20 whedur he or she desires to launch die service instantiation 
on this backend serva prior to adminlsterii^. The laundiing 
of die service itsdf may dien be performed unda the 
direction of the service administration oomp<»ient (dirough 
an agent if the agent is involved in launching die service 

2s instantiation). 

FIG. 11 illustrates, in one embodiment of the present 
invention, die steps involved when a service administration 
conqKMient is invoked throu^ the serva managa window 
conq>o&ent To facilitate understanding, the HleService net- 

30 work service is chosen as an cxan^le although the method 
herein, widi modifications familiar to diose skilled in die art. 
may well apply to any odia network service. In FIG. 11. it 
is assumed diat the service instantiation being invoked is 
already tunning on the backend serva. FIG. 11 staits at 

33 block 1100. In block 1102, die HleService component 
receives data from the serva maiuiga component (throu^ 
the seiva managa conqmnent cxtauion. v^iich is the 
OpenAdmin esctension in the qwcific exanqple herein) data 
regarding the HleService instantiation to be adminittered. 

40 Examples of such data indude die network serva address of 
the serva to be administered and optionally, any shared data 
such as session ID, and die like. In Uock 1104, die FileSa- 
vice oonqionent establishes a logical network session with 
the serva associated with die received serva address. In me 

43 embodiment* this logical session r^Ksents an AFP (Apple 
File IVotocol) session. If die logical session is successfully 
established, die data regarding the file system hierarchy is 
downloaded from that serva to the FileSavioe component 
in Uock 1106. Such file system hierarchy indudes, in die 

so caseofttieFIleServlcec(»q)onent,infonnationsudiasalist 
of volumes, files, folders, and die like on the serva associ- 
ated widi the recdved sova address. If sudi a logicd 
network session cannot be established, e.g., as in die case 
when die backend serva Is not turned on or the network 

S3 connection is not enabled, an error message is preferably 
dispiayoA to inform the network administrator of the prob- 
lem. 

In block 1108, die service administration window asso- 
ciated with FileServioe is displayed, along with the daU 

60 recdved in block 1106 in die appropriate subconqxment of 
die service admimstration component As mentioned earlia. 
the service administration component associated widi this 
window may indode many subconqK»ents. Bxamides of 
sudi subcomponents indude management functions related 

65 to access control, activity monitor, log file, and the like as 
shown in FUeScrvlce administration window 200 of FIG. 
SB. The steps of FIO. 11 end at block lUO. 
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It should be borne in mind that allbough the iovention is 
desoibcd using flow dUgranu as an illustration aid, it 
should be noted that the methods and apparatus of the 
present invention may be evcnt-drivcQ. capabte of executing 
multiple processes at the same time As such, different 
processes and tasks do not necessarily have to be pafornicd 
in the specific sequential order chosen for illustration, and a 
conqnitCT and/or software program implcmcntittg the inven- 
tive method may be executing otba tasks while executing 
the inventive method disdosed herdn. 

Further, while this invention has been described in terms 
of several picfened embodiments, there arc alterations, 
pennutations, and equivalents whldi fall within the scope of 
this Invention. It should also be noted that there are many 
alternative ways of implementing the methods and appara- 
mses of the present invention. It is therefore intended that 
the following appended claims be interpreted as Including 
aU such alterations, permutations, and equivalenU as fall 
within the true spirit and scope of the present invention. 



AppcodU A 

CUw D wfinilioo iar Scrnce CH>iccl 

ftfiMteL-OA OErSBKV ICTS- 
idcfiui _OACfflTSEKVICES_ 

imcludD <aaoiot9i{Q> 
#iiictadc <»ocicl».kfl> 

#ilnifcf_ODTyraSM„ 
Atthik "^DTypctM-idT 
iencEf 



fi CIbmu defined ta thij tnterfioe 



iiaeftee OAOetSernoef ; 



/J Cltmet vmi by dm isierfMe 



naerteo ODRtme; 



ff 

M Definttkoi for OAOetServioM 



typttkf •amlfaken 
tj^edef ■onflbfeeo 
lypedef ■amlbkBO 



SttimPtn 

PIT. 

HucQe; 



//OAGetSaviwt 
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Appcodflt A 
Clm Definitioo for Serrice CAject 



10 



wid OelServiceNanKOii StringPir KfvioeNnDe); 

// Oct the lerTice icoii 
Ktnlk aedIocDSuitt( >: 

// Oet tbe aervke Getlofo pnt bud in ocdn lo imrate tfae righl 
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25 



30 



33 



40 



// far this ■errice get info cooipaaeiil. 
ditr* OetOednfoPntKiixV ); 

// Oct dw wrrkx iUtamnslntkm |wrt 
rii^ - OQOtpoiient 

// &r ttiu aerrioe ■dmmittKticn ooopoaeac. 
elar* OetAdnnnPBitKiadt % 

HOellhi lervice UboOkii? p«rt kind mortelo taroir the 

// far diii •nvioe UmOiaup c on y c nrrt. 
cfair* OetUaBrowaoPntfOndO; 

// Sa ihe terrice type otme {«». flk term •crfice type, prim 
•over •erviee typo, etc.) 

ml SetServiDeNtmeOn StringPtr B«vioeN«niB>; 



voU SellccDSaileCm HtaSie mUt); 

Set a* •em«* Oednfo p«t kind, 
-void SetOeOnfbPtitKindCm clur* Unl); 

// Set (1» nrvioe Adnuntstntioa pan kml 
wnd SetAdnmPDti£i»l(ai Omi* kind); 

// Set Ifae Kivice UaetOrottp pvt kiod 

void SdVGBiDwwiPutKindCm cbs* kind): 

// Set the OBW telKtBd zoos nsw 

voU SetZcoBNiine(io StnngPtr KweName); 

Oetooe iBivk* itatu liy providing ■ dm rtructuw of 
mfoomtkni nsinfiag 
//dtis specific ■errice. 

void OetQiMSerrneStBtiBCtn P» temeePSPtr); 

// Service object itiiti id find all of its aerviMi in tbe oetworiL 
vokl EiHmServkw<mPtr«mcePBPtr); 



JHfltof _S01dIDL,_ 

43 { 

ftiKtioiiprBfix s OAOetSernoe*. 

wenide: 

totnUmnit; 



SO 



55 



OAOelSerrioee: SOMOfepJect 
// imtiilin •errice object 

// Setup itt fieU intamniooi by leeding from its teeovsoe file 
void Intitlize(in itcit ttn^fiJgOD, in itet kxxPmnaifiDy, 

// Get ll» tenke type obiiib (eg. file eerw Mvice typ^ pfia 
acwcr Mtvioe type, etc.) 
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rotoMeonlen 

OeCServiccNtme, 

OedoooSoitB, 

OetOetlofol'trtKiDd, 

OetAdtmnPuiKind, 

OetUGBlDWKiPntKitid, 

SetSerriceNnae. 

SetkooSoile, 

SetOetInf[d>MKiiid, 

SetAdminPntKaid, 

SetUCStcrweeiPulKind, 

SeOoa^tme, 

OetOaeSerriceStnu, 

EoumSoTioee; 

StringPtr tSavioeNBme; 
Htadb flflonSailB; 

(QstlnfaftitKindi 
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What is claimed is: 

1. A remote networt administratioD apparatus for man- 
aging network services on a plurality of networic servers in 
a ooio^nita' netwwk, conqirising: 

a component rq>osltory, said ccnqKHicnt repository con- 
taining service conqwnents, each of said service coan- 
ponents corresponds to one of said network services; 

a service object, said service object being associated with 
a first one of said service conaponents, said service 
object, when executed, comnuinicates with said plural- 
ity of netwcrk servers to obtain network service instan- 25 
tiatioo data relating to instantiations of a first one of 
said network services on said plnraUty of netwoik 
servers, said first one of said netwoxk services being a 
netwoft service tlutt cooesponds to said first one of 
said service conqKments; » 

a server manager compoaent for receiving said network 
service instantiation data from said service object; 

a server manager window representing tbe user intofaoe 
component for said sow manager conqmncnt, said 
server manager window displaying a status of said 35 
instantiations responsive to said network service 
instantiation data. 

2. The renu>te network administratloii appamus of daim 

1 wbeitio said server manager window is capable of receiv- 
ing a human-input administration oxmnand related to a first 40 
ODC of said instantialioos and passing said human'input 
administration command to said server manager.oon^ionent, 
therein permitting said server manager oompcHient to 
adminiitfer said first one of said instantiations responsive to 
said human-input administratioo command. 43 

3. Tbe remote network administratioD iqjparatus of daim 

2 wherein said human-tnpiit administration command com- 
prises a command for managing a list of users having access 
to said first one of said instantiations. 

4. The remote network administration ^qnparatus of claim 30 

3 further conqirislng a uso/group manager conqK)nent said 
user/group manager conq>onent receives a network server 
address from said server manager oon^xwent when said 
command for managing a list (tf users having access to said 
first one of said instantiations Is received by said server 33 
manager coiti|)onent, said netwodc server address being an 
address of a networic server on which said first one of said 
instantiations is installed, said user/group manager 
oomponent, responsive to a receipt of said network server 
address, communicates with said network server on wliicfa 60 
said specified one of said instantiations is installed to obtain 
data regarding users having access to said first one of said 
instantiations. 

5. The remote network adminlstratloD qiparatus of daim 

1 wherein said service object encqpnulatea servioe-q>edflc 63 
details from said server manager conqranent tfaerel^ per- 
mitting said server manager component to obtain said net- 



work service instantiation data through said service object 
even though said server manager oonqwnent has no knowl- 
edge of said servioe-spedflc details. 

(. The remote network administration ^iparatus of claim 
5 wherein said service-specific details include a function of 
said aetwoft service. 

7. Tlie remote network administration iqjparatus of claim 
1 wherein said service object encqisulates network-specific 
details from said server manager oon^mnent thereby per- 
mitting said server manager component to obtain said net- 
work service instantiation data through said service object 
even thou^ said server manager conqtoneot has no knowl- 
edge of said network-specific details. 

8. The remote netwock administration qjparatus of daim 
7 wherein said nctwark-^>ecific details include a oomnm- 
niciUion protocol of said computer network. 

9. The remote network admimstration ai^atus of claim 
S wherein said netwoik-spedfic details inchide bow many 
network servers there ate in said phmdity of network 
servers. 

It. The remote netw<Mt administratioD apparams of daim 
1 v^ierein said service object is a system object module. 

IL In a oomputer network having a plurality of network 
servers, a mettiod fof managing network services on said 
plurality of n^ook servers, comprising: 
providing at least one service conqranent in a conqxjcent 
repository, said service con^wnent corresponds to one 
of said network services; 
providing a server manager componei^ said server man- 
ager oonqmnent communicates widi said conqwnent 
repositcxy to ascertain the presence of said service 
ooiXQX>nent; 

executing a service object associated with said service 
conqxHMnt, said service object communicates with said 
plnrallty of network servers to obtain network service 
instantiation data relating to instantlatioos of said one 
of said netwosk services on said (Hurality oi network 
servers; and 

passing said netwoik service instantiatifHi data to a server 
manager window component for displaying a status of 
said instantiations re^nsive to said network service 
instantiation data. 

12. The method of daim 11 further conqirislng: 
receiving duoug^ said server manager window a human- 

input administration cosunand related to a first one of 
said instaidiatioDs; and 
passing said human-input administration command to 
said server manago^ conqwnent, thereby permitting 
said server manager conqwnent to administer said first 
one of said instantiations re^nstve to said hunuui- 
input administration command. 

13. The method of daim 12 wherein said human-input 
administratim comnumd comprises a ccHumand for manag- 
ing a list of users having access to said first one of said 
instantiations. 

14. The method of claim 13 further conq^ing: 
iccdving through a user/group manager oon^nent a 

network server address from said server manner com- 
pooent when said command for managing a list of users 
having access to said first one of said instantiations Is 
received by said server manager component, said net- 
work server address being an address of a network 
serva on whidi said first 00c of said instantiations is 
installed; 

communicating between said usei/gro<q> manager com- 
ponent and said network server on whidi said q)ecificd 
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one of said tnstaittiadoas is installed, responsive to a 
leccipc of said network server address, to obtain data 
Kgaiding users having access to said first one of said 
instantiations. 

15. The mctbod of claim 11 wturdn said service object 5 
encapsulates scivicc-spcciflc details from said server man- 
ager component, thereby pennitting said server manager 
component Co obtain said networic service instantiation data 
through said service object even though said server manager 
component has no knowledge of said service-specific lo 
details. 

16. The remote network administntioo apparatus of dalm 
IS wherein said service-specific details inchide a function of 

said network servioe. 

17. The remote netwosk administration a|]paratus of claim 15 

11 wherein said servioe object enoqisulates netwock-spedfic 
details from said server manager conqwoeot, thereby per- 
mitting said server manager oonqjonent to obtain said net- 
wcrk service instantiation data through said servioe object 
even though said server manager oonqwncnt has no knowl- 20 
edge of said network-specific details. 

Ig. The remote network administration apparams of daim 
17 wbeiein said netw<^- specific details Inchide a commu- 
nication protocol of said computer network. 

19. A computer readable medium containing program 23 
instructions fcH- managing network services on a pliuaHty cf 
network servers in a computer network, said computer 
readable medium comprising instructions for: 



24 

providing at least one service ooiiq>oDent in a component 
repositoxy. said service component corresponds to one 
of said network services; 

providing a server manager component said server man- 
ager cCHiq)onent communicates with said component 
repository to ascertain the presence of said service 
conqranent; 

executing a service object associated with said service 
component, said service object communicates with said 
plurality of network servers to obtain network service 
instantiation data relating to Instantiatioas of said oac 
of said network services on said phirality of network 
servers; and 

passing said network service instantiation data to a server 
manager window conqionent for di^laying a status of 
said instantiations re^nsivc to said network service 
instantiation data. 

2Q. The computer readaible medium of claim 19 further 
comiaising: 

recdving through said server manager window a human- 
iiqHit administration command related to a first one of 
said instantiatloos; and 

passing said human-input administration command to 
said server manager conqionent, (hereby permitting 
said server manager component to administer said first 
one of said instantiations re^nsivc to said human- 
input administration command. 

* « « * * 



08/19/2003, EAST version: 1.04.0000 



UNITED STATES PATENT AND TRADEMARK OFFICE 

CERTIFICATE OF CORRECTION 



PATENT NO. : SJ^B,^3(> 
DATED : May 5. 1998 
INVENTOR(S) : Daly et al . 

It is certified that error appears in ttie above-lndentified patent and that said Letters Patent is hereby 
corrected as shown t>etow: 

Column 12, line 19, after "1995*' insert —(U.S. patent Serial No. 
08/552,9^2, Issued as U.S. Patent No. 5,729,73^) — . 



Signed and Sealed this 
Twenty-eighth Day of July, 1998 



Attest: 




BRUCE LEHMAN 



Attesting Officer 



Commiisiotttr of Paienti and Trademarks 



08/19/2003, EAST version: 1.04.0000 



L Number 


Hits 


Search Text 


DB 


Time stamp 


1 


30 


network adj30 servic$3 adj30 provision$3 


US PAT 


2003/08/19 18 


07 






and attribute and @ad<20000727 










2 


0 


transparent adj30 servic$3 adj30 
provision$3 and attribute and @ad<20000727 


US PAT 


2003/08/19 


18 


07 


3 


51 


transparent and servic$3 adjSO provision$3 


US PAT 


2003/08/19 


18:18 






and attribute and @ad<20000727 










4 


0 


instantiat$4 and service adj30 provision$3 
adj30 flex$4 and attribute and 
@ad<20000727 


US PAT 


2003/08/19 


18 


20 


5 


9 


instantiate and service adj30 provision$3 
and flex$4 and attribute and network and 
@ad<20000727 


US PAT 


2003/08/19 


18 


27 


6 


4 


instantiate and service adj30 provision$3 
and flex$4 and attribute and transparent 
and @ad<20000727 


US PAT 


2003/08/19 


18 


29 


7 


0 


instantiate and service adj30 data adjS 
provision$3 and flex$4 and attribute and 
@ad<20000727 


US PAT 


2003/08/19 


18 


30 


8 


2 


instantiate and service and data adj5 
provision$3 and flex$4 and attribute and 
@ad<20000727 


US PAT 


2003/08/19 


18 


30 



Search History 8/19/03 6:32:04 PM Page 1 
C:\APPS\EAST\Workspaces\09-626735 .wsp 



L Nuinber 


Hits 


Search Text 


DB 


Time stamp 


1 


0 


"service provision$3" and @ad<20000727 


US PAT 


2003/08/19 


16 


42 


2 


0 


"network servic$3" and @ad<20000727 


US PAT 


2003/08/19 


16 


42 


3 


17675 


network and servic$3 and provision$3 and 
@ad<20000727 


US PAT 


2003/08/19 


16 


43 


4 


1736 


network and servic$3 adj30 provision$3 and 
@ad<20000727 


US PAT 


2003/08/19 


16 


43 


5 


296 


network adj30 servic$3 adj30 provision$3 
and @ad<20000727 


US PAT 


2003/08/19 


16 


43 


6 


30 


network adj30 servic$3 adj30 provision$3 
and attribute and @ad<20000727 


US PAT 


2003/08/19 


16 


44 


7 


3 


network adj30 servic$3 adj30 provision$3 
and attribute and transparent and 
@ad<20000727 


US PAT 


2003/08/19 


16 


47 



Search History 8/19/03 5:40:02 PM Page 1 
C:\APPS\EAST\Workspaces\09-62673 5 .wsp 



